DraftKings · Breach

n0n claims 7.4 million DraftKings email addresses

· 1 min read

The n0n group threatens to publish large datasets allegedly linked to DraftKings. The claim covers 7.4 million hashed email addresses, including 2,886,388 allegedly resolved to individuals, plus 6.3 million mobile advertising identifiers.

WhatsApp LinkedIn X
HighBreachNo software to update

In 30 seconds

DarkWebInformer
Alleged

A monitoring account says the n0n ransomware group has listed data allegedly tied to DraftKings and is threatening to publish it. The headline figure is 7.4 million hashed consumer email addresses, including 2,886,388 purportedly matched to named people. The account explicitly says the claim remains unverified.DarkWebInformerx.com · DarkWebInformer · xOpen original sourceSee in source list

What happened

Alleged

DarkWebInformer reported that n0n's listing describes three categories: 6.3 million mobile advertising identifiers, 7.4 million hashed email addresses and demographic campaign analytics covering 11,421 devices. A separate researcher also described DraftKings as allegedly breached and highlighted the 2,886,388 figure.DarkWebInformerx.com · DarkWebInformer · xOpen original sourceSee in source listAlvieriDx.com · AlvieriD · xOpen original sourceSee in source list

Why it matters

Inferred

If accurate, the listing would concern more than email data. It claims to connect millions of advertising identifiers with audience information and to resolve nearly 2.89 million hashed addresses to named individuals, potentially making otherwise pseudonymous marketing records more personally revealing.DarkWebInformerx.com · DarkWebInformer · xOpen original sourceSee in source list

What to do

Inferred

For now, treat the numbers and the claimed DraftKings connection as unconfirmed rather than as a verified breach. Neither post supplies a company statement, independent validation or evidence describing how the data was obtained.DarkWebInformerx.com · DarkWebInformer · xOpen original sourceSee in source listAlvieriDx.com · AlvieriD · xOpen original sourceSee in source list

Confirmed and still uncertain

Observed

What is observable is that two accounts circulated the allegation and images associated with it. What remains unknown includes whether the datasets are authentic, current or unique, whether they originated from DraftKings, and whether n0n gained unauthorized access to any DraftKings system.DarkWebInformerx.com · DarkWebInformer · xOpen original sourceSee in source listAlvieriDx.com · AlvieriD · xOpen original sourceSee in source list

What people are saying

Observed

AlvieriD focused on roughly 2.89 million email addresses and called the incident an alleged n0n breach. Minutes later, DarkWebInformer presented a broader set of claimed records and cautioned that the claim was unverified.AlvieriDx.com · AlvieriD · xOpen original sourceSee in source listDarkWebInformerx.com · DarkWebInformer · xOpen original sourceSee in source list

Evolution

Observed

The first post in this evidence batch highlighted 2,886,388 email addresses. About five minutes later, the second post expanded the picture to include 7.4 million hashed email addresses, 6.3 million advertising identifiers and analytics for 11,421 devices, while adding an explicit verification warning.AlvieriDx.com · AlvieriD · xOpen original sourceSee in source listDarkWebInformerx.com · DarkWebInformer · xOpen original sourceSee in source list

Reach

Observed

2 independent groups, 2 updates, and 2 engagements.

Technical detail

Alleged

The listing reportedly distinguishes hashed email addresses from mobile advertising identifiers. It also describes device-level fields including age, gender, language, handset, carrier and app-profile data. The evidence does not explain the hashing method, the matching process used to identify people or the structure of the underlying records.DarkWebInformerx.com · DarkWebInformer · xOpen original sourceSee in source list

Sources and evidence

Observed

The supplied record consists of two X posts from third-party observers, both accompanied by images. Neither is a statement from DraftKings or n0n, and the batch contains no sample records, forensic report or independent confirmation that would establish the dataset's origin or authenticity.DarkWebInformerx.com · DarkWebInformer · xOpen original sourceSee in source listAlvieriDx.com · AlvieriD · xOpen original sourceSee in source list

Sources

  1. DarkWebInformerx.com · DarkWebInformer · x
  2. AlvieriDx.com · AlvieriD · x

Incidents like this, every morning

The ones that need action first, in a 3-minute read.

Free · 1 email a day, in the morning · no spam, unsubscribe in 1 click

Get the next one tomorrow morning

One email a day with what changed, what to fix first and how.

Free · 1 email a day, in the morning · no spam, unsubscribe in 1 click

Share it with your team

Whoever handles security with you should get it too.

LinkedIn X

Your colleague gets a confirmation request. Nothing is sent unless they confirm.

See all news

Read also

Before you go: get this every day

The HIFY Radar daily edition lands every morning with the incidents that need action. Free.

Free · 1 email a day, in the morning · no spam, unsubscribe in 1 click